A shield and a shortcut,in front of your site.
Cloudflare sits between your website and the world — blocking the bad traffic, and serving the good traffic from a data centre near them instead of far from you. Faster and safer, at the same time.
The story so far
Distance is slow. Cloudflare deletes the distance.
Your server lives in one place. Your customers don't. Every kilometre between them is milliseconds your visitor waits — and a visitor in another country waits longest of all. Meanwhile, bots and attacks knock on your door all day, using up the resources real customers need.
Cloudflare solves both at once. It keeps a copy of your site in hundreds of cities, so pages load from nearby wherever someone opens them, and it filters out malicious traffic before it ever reaches your server. We set it up properly — caching rules, security level, SSL — so you get the speed and the protection without the foot-guns.
In practice
What we set up for you
Global delivery
Your site cached across Cloudflare's CDN, so it loads fast in Cluj, Milan or anywhere your customers are.
Always-on protection
Malicious bots and attacks filtered out before they touch your server — with a firewall tuned to your site.
Free, automatic SSL
The padlock every visitor and search engine expects, renewed for you, forever.
Configured, not just switched on
Cache rules and security levels tuned by hand — the difference between 'installed' and 'working'.
Common questions
Cloudflare, answered.
What exactly does Cittago set up when configuring Cloudflare?
We put Cloudflare in front of your site with four things configured by hand: global caching so pages load from a data centre near each visitor, a firewall tuned to filter malicious bots and attacks, free automatic SSL, and cache and security rules set properly rather than just switched on.
How is this different from just turning Cloudflare on myself?
Cloudflare has a free tier anyone can enable, but the default settings can break pages or leave gaps. We tune the caching rules, security level and SSL by hand to your specific site, so you get real speed and protection without the foot-guns of a switched-on-but-unconfigured setup.
Does this suit a small business, and what languages do you work in?
Yes. Cittago is a boutique, senior-only agency in Cluj-Napoca serving six countries since 2011, and the speed and security benefits apply to any site with visitors, however small. We work in English, Italian and Romanian, rated 5.0 on Google.
What does it cost and how do I start?
It starts with a free 30-minute performance check, then scoping to your goals rather than a fixed price. In that half hour, with no script or pitch, we see how your site behaves for far-away visitors and how exposed it is, and tell you honestly whether Cloudflare would help.
What is a CDN, and why does it matter for my site?
A CDN is a network of servers spread around the world that keeps copies of your site and serves each visitor from the nearest city. It matters because distance is measured in milliseconds of waiting: a visitor in Milan who receives the page from a server in Italy sees it sooner than if it had to travel from Romania. Cloudflare is the CDN we configure most often.
Can Cloudflare break something when it is switched on?
Yes, if it is merely switched on and left at its defaults. The most common failures are cart or account pages cached by mistake, and a security level that blocks legitimate form submissions. That is why cache rules and the security level are tuned by hand for your site, and checked page by page after activation.
Who decides which AI bots may read my site?
You do, from the Cloudflare dashboard, across three categories: search, agent and training. The decision is commercial rather than technical — an online shop usually wants to be crawled by anything that can surface its products, while an ad-funded site wants the opposite. We wrote the mechanism up in full in our article on the robots.txt Cloudflare writes for you.
Can Cloudflare change my robots.txt file?
Yes. Cloudflare has a feature that generates and updates robots.txt from the AI bot settings in your dashboard, and it is on by default for new customers. The generated block is prepended to your file, fenced between two comment markers starting with # BEGIN Cloudflare. Checking takes two minutes: open yourdomain.com/robots.txt and search for the word Cloudflare.
What was announced for 15 September 2026?
Cloudflare announced on 1 July 2026 that from 15 September 2026 it changes the defaults for AI traffic, and that multi-purpose crawlers will be judged on all of their behaviours, with the most restrictive rule applying. The practical consequence, in Cloudflare's own words: anyone who chose to block AI training may end up blocking Googlebot, Applebot or BingBot too.
A fair first step
Start with a free performance check
Thirty minutes, no script and no pitch. We'll see how your site behaves for far-away visitors and how exposed it is — and tell you honestly whether Cloudflare would move the needle for you.
15 years · 5.0 on Google · 56 brands · 11.4× average return on ads · 6 countries
What clients say
